๊ฐ•์˜

๋ฉ˜ํ† ๋ง

์ปค๋ฎค๋‹ˆํ‹ฐ

Inflearn ใ‚ณใƒŸใƒฅใƒ‹ใƒ†ใ‚ฃ Q&A

sponge ใฎใƒ—ใƒญใƒ•ใ‚ฃใƒผใƒซ็”ปๅƒ
sponge

ๆŠ•็จฟใ—ใŸ่ณชๅ•ๆ•ฐ

[DevOpsๅฎš็Ÿณ3] GitHub Actionsใงๆญฃใ—ใๆง‹็ฏ‰ใ™ใ‚‹CI

Aqua TrivyใจDependency Trackใซใ‚ˆใ‚‹่„†ๅผฑๆ€งใƒใ‚งใƒƒใ‚ฏใจSBOM็ฎก็†

๐Ÿ™‹๐Ÿป Trivy์™€ Dependency Track์ด ์†Œ๊ฐœ๋˜๋Š” ์„ธ์…˜ ๋๋ถ€๋ถ„์— ๊ฒฐ๊ณผ ์˜์ƒ์ด ์ž˜๋ฆฐ ๊ฒƒ ๊ฐ™์•„์š”

ไฝœๆˆ

ยท

725

0

์•ˆ๋…•ํ•˜์„ธ์š”. ๊ฐ•์˜ ์ž˜ ๋ณด๊ณ  ์žˆ์Šต๋‹ˆ๋‹ค!

Aqua Trivy๋กœ ์Šค์บ”๋œ sarif ํฌ๋งท์„ GitHub์— ์ „์†กํ•œ ๊ฒฐ๊ณผ์™€ Dependency Track์— ์ „๋‹ฌ๋œ ๊ฒฐ๊ณผ๋ฅผ ํ™•์ธํ•˜๋Š” ๊ณผ์ • ์˜์ƒ์ด ๋ˆ„๋ฝ๋œ ๊ฒƒ ๊ฐ™์Šต๋‹ˆ๋‹ค. ๋Œ€์ƒ ์„ธ์…˜์€ Aqua Trivy์™€ Dependency Track์„ ์ด์šฉํ•œ ์ทจ์•ฝ์  ์ ๊ฒ€ ๋ฐ SBOM ๊ด€๋ฆฌ ์ž…๋‹ˆ๋‹ค.

์ฒดํฌ ํ•œ๋ฒˆ ๋ถ€ํƒ๋“œ๋ฆฝ๋‹ˆ๋‹ค :)

ๅ›ž็ญ” 1

1

JeongSuk Lee๋‹˜์˜ ํ”„๋กœํ•„ ์ด๋ฏธ์ง€
JeongSuk Lee
ใ‚คใƒณใ‚นใƒˆใƒฉใ‚ฏใ‚ฟใƒผ

์•ˆ๋…•ํ•˜์„ธ์š”,

ํ•ด๋‹น ๋ถ€๋ถ„์„ ํ™•์ธํ•ด๋ณธ ๊ฒฐ๊ณผ, Dependency Track์œผ๋กœ ์ „๋‹ฌํ•˜๋Š” ๊ณผ์ •์€ ""Container ๊ธฐ๋ฐ˜์˜ Custom Action ๊ตฌ์„ฑ" ํŒŒํŠธ์—์„œ ๋ˆ„๋ฝ๋œ ๋ถ€๋ถ„์„ ์ปค๋ฒ„ํ•˜๊ณ  ์žˆ๋Š” ๊ฒƒ์„ ํ™•์ธํ•˜์˜€์Šต๋‹ˆ๋‹ค.

๊ฐ•์˜์— ๋งŽ์€ ๊ด€์‹ฌ์„ ๊ฐ€์ ธ์ฃผ์…”์„œ ๊ฐ์‚ฌ๋“œ๋ฆฌ๋ฉฐ, ์ถ”ํ›„ ๊ธฐํšŒ๊ฐ€ ๋˜๋Š”๋Œ€๋กœ ๋ˆ„๋ฝ๋œ ๋ถ€๋ถ„์— ๋Œ€ํ•œ ์™„์„ฑ๋„๋ฅผ ๋†’์—ฌ๋ณด๋„๋ก ํ•˜๊ฒ ์Šต๋‹ˆ๋‹ค.

 

๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

 

 

Jeongyeol Lee๋‹˜์˜ ํ”„๋กœํ•„ ์ด๋ฏธ์ง€
Jeongyeol Lee
่ณชๅ•่€…

๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค! ํ™•์ธํ–ˆ์Šต๋‹ˆ๋‹ค :)

sponge ใฎใƒ—ใƒญใƒ•ใ‚ฃใƒผใƒซ็”ปๅƒ
sponge

ๆŠ•็จฟใ—ใŸ่ณชๅ•ๆ•ฐ

่ณชๅ•ใ™ใ‚‹